youtag

<p>IP Vault lets you protect your WordPress backend – and any other part of your website – from non verified users.</p>
<p>IP Vault Firewall also preserves your server ressources and bandwidth by blocking hacking attempts before they reach your site.</p>
<h3>How does it work ?</h3>
<p>Requests to protected files and folders are redirected to the <em>Authentication Page</em>. IP Vault unlocks user’s IP addresses using a key<br />
that is emailed for authentication. Once users verify their account, they can access all restricted areas. Users are automatically verified on registration.</p>
<h3>What is protected ?</h3>
<p>Out-of-the box, IP Vault restricts access to <code>.php</code> and <code>.phtml</code> files, as well as <code>wp-admin</code> folder, which are frequently exploited by bad bots and hackers.<br />
You can choose which part of your site to protect. Need to make the whole website private ? No problem, just restrict access to <code>/</code>.</p>
<h3>The story behind this plugin</h3>
<p>In the past 20 years, I have been monitoring a few dozen client sites to prevent malicious access. I have also helped a great number of people to clean their website from malware.<br />
I noticed that even marginal WordPress sites or non-wordpress PHP based sites are constantly exposed to hacking attempts.</p>
<p>Almost all exploits I have seen work by either calling a vulnerable PHP script already on the server, by adding such a script or by injecting their own code into an existing script.</p>
<p>I have tried and tested quite a few security plugins. They can be quite complex to set up and to maintain. Some security plugins try to block access to vulnerable files by comparing requests to a blacklist.<br />
These tend to become quite large and need frequent updates to be efficient. Others use geo-blocking services to block requests from certain countries. However in my experience, hacking attempts can come from just about any location.</p>
<p>I thought there must be a better way using whitelists for verified users instead. And that’s how the idea for IP Vault was born.</p>
<h3>To Dos</h3>
<ul>
<li>add option to get auth code by SMS (requires users to register phone number)</li>
</ul>
<h3>I love this plugin. How can I contribute ?</h3>
<ul>
<li><a href="https://wordpress.org/support/plugin/ip-vault-wp-firewall/reviews/#new-post" rel="ugc">Rate plugin</a> and leave feedback on WordPress.org</li>
<li>Help resolve questions in support forums</li>
<li>Help with translations</li>
<li><a href="https://www.paypal.com/donate/?hosted_button_id=Y7VNAG4WC8YMC" rel="nofollow ugc">Donate</a></li>
</ul>
<h3>Disclaimer</h3>
<p>This plugin uses the following <strong>3rd Party services</strong> :</p>
<ul>
<li>
<p><a href="https://ip-api.com" rel="nofollow ugc">ip-api.com</a> – used to offer insights into IP addresses, namely country and city information. <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">Terms and Policies</a></p>
</li>
<li>
<p><a href="https://www.ipify.org" rel="nofollow ugc">ipify.org</a> – used to map IPv6 addresses to IPv4. <a href="https://geo.ipify.org/terms-of-service" rel="nofollow ugc">Terms and Policies</a></p>
</li>
</ul>


Two-factor authentication (formerly IP Vault)

Protect your website against Brute Force Attacks and other malicious requests that have potential to jeopardise the website’s safety or hijacking your …

Rachel Cherry

<p>It hopefully doesn’t happen alot, but sometimes you have to edit the core code of a plugin or theme. It’s not ideal, and it sucks, but, whatever the reason, you had to do it. Now you’re worried you’re going to forget about your edit, update your plugin or theme (as you usually should), and lose your edits!</p>
<p>Well, instead of worrying, use the Lock Your Updates Plugins/Themes Manager to lock your plugins and themes from being updated and to store notes to help you remember what edits you made, all from the plugins or themes admin management page.</p>
<p>The Lock Your Updates Plugins/Themes Manager is multisite compatible.</p>
<h4>Features</h4>
<ul>
<li>Provides simple lock/unlock management on the plugins and themes admin management page.</li>
<li>Provides method of storing notes so you can remember why you locked the plugin or theme.</li>
<li>You will still be notified that a plugin or theme needs to be updated, even if it is locked.</li>
<li>Lock Your Updates is multisite compatible.</li>
<li>If running WordPress multisite, Lock Your Updates provides an admin column that shows you where your plugins and themes are active.</li>
</ul>
<h4>If You’d Like To Contribute</h4>
<p>If you’d like to contribute to this plugin, feel free to do so on the <a href="https://github.com/bamadesigner/lock-your-updates" rel="nofollow ugc">“Lock Your Updates” GitHub repo</a>.</p>
<h4>Credits</h4>
<p>A big shoutout to Aaron Robb <a href="https://twitter.com/aaron_robb" rel="nofollow ugc">@aaron_robb</a> who helped make this plugin grow.</p>


Lock Your Updates Plugins/Themes Manager

Allows you to lock your plugins and themes from being updated and keep notes on why the plugin or theme is locked.

Two-factor authentication (formerly IP Vault) vs Lock Your Updates Plugins/Themes Manager